Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File: WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier: YonHm8bVO1Iy2OfsK1Srg/mM6Sqv1Mg/4O8gDGODz3g=
Subject key identifier: 5E:3B:29:B5:F3:ED:EF:A2:D3:BA:D5:0C:7F:EA:FF:F6:88:A2:8C:41
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial: 019872CF542070171084E910F8B79886B792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number: 0550
Signing time: Mon 04 Aug 2025 02:00:46 +0000
Manifest this update: Mon 04 Aug 2025 02:00:46 +0000
Manifest next update: Tue 05 Aug 2025 02:00:46 +0000
Files and hashes: 1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=)
2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: y6KpfZx6ZCXJ2By+2EoC70228SVebQxRlpvDpRqkNUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:54:20:70:17:10:84:e9:10:f8:b7:98:86:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Validity
Not Before: Aug 4 02:00:46 2025 GMT
Not After : Aug 5 02:00:46 2025 GMT
Subject: CN=5e3b29b5f3edefa2d3bad50c7feafff688a28c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:46:7e:0f:37:13:a3:74:53:64:69:c4:07:
8e:37:30:a3:d4:48:19:fb:9b:a3:72:56:75:c2:44:
df:96:a2:ce:51:d4:47:53:52:26:fd:fd:f5:76:c5:
0a:b3:7c:6c:fd:52:fc:49:59:e2:48:f6:27:64:59:
be:e4:c3:6d:2f:67:04:b9:22:7f:d1:f2:09:f7:3e:
3e:62:7e:66:4b:ea:f8:19:35:13:06:d9:bd:2a:48:
1d:d4:be:18:81:41:3c:a7:35:f3:da:82:a1:23:27:
02:46:d6:18:c3:ec:af:4f:56:7c:31:69:d4:dc:99:
b8:ea:d2:be:fb:de:18:5b:fd:84:ac:4e:95:33:9e:
ff:4c:8c:63:1b:b1:18:cc:e1:b3:1f:e0:e3:38:c7:
32:fa:a5:df:ce:a3:e1:15:a9:57:de:d3:39:30:d0:
d7:9c:d3:67:3b:13:22:89:51:95:3b:32:5c:b6:2e:
4c:57:77:f0:50:4c:32:57:1d:65:1f:83:a7:0e:66:
1e:b4:b8:21:18:51:c5:03:b4:49:e4:ea:1b:6e:73:
28:2f:a1:77:68:a5:e5:ae:b4:03:1c:58:09:b1:ca:
67:aa:ed:72:2b:23:51:5a:5f:17:f5:5b:a2:a3:7f:
a3:80:5f:79:9b:99:37:75:05:ad:02:36:c3:6f:36:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3B:29:B5:F3:ED:EF:A2:D3:BA:D5:0C:7F:EA:FF:F6:88:A2:8C:41
X509v3 Authority Key Identifier:
keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a8:ae:3e:12:c6:56:80:ea:72:7b:df:26:c6:0b:4b:ca:e5:
48:fd:46:e1:0e:25:f9:06:01:6f:69:dd:e3:de:0b:2a:99:06:
cf:5f:c8:ae:64:93:cd:18:a4:a2:b0:e4:80:8c:1c:55:b0:06:
bf:64:bb:70:62:c5:a8:b0:09:72:c6:a4:53:03:b0:8e:8b:9c:
44:00:65:df:53:75:63:16:9c:96:5a:41:1a:d5:d2:ba:4c:0e:
22:98:3e:1c:67:27:24:69:eb:34:8d:3e:6a:cd:a9:9a:ff:85:
44:af:4a:99:3e:a7:27:2b:5c:b1:4b:8b:b9:5f:6c:ff:a4:05:
b3:1a:08:9d:b4:2f:cf:74:ae:4c:57:cc:5e:0b:af:2a:71:7a:
85:b1:ac:b4:87:92:a2:66:de:fe:51:c1:59:1d:ca:55:96:02:
69:95:9c:31:a5:7c:e9:c5:e7:20:a3:af:5c:c6:60:08:8c:93:
ef:fb:02:91:79:5f:96:5d:d0:3f:07:e6:b9:e9:76:07:f2:62:
1b:af:cf:f2:64:39:b9:c4:ae:e2:c6:5d:ec:27:bd:50:1a:20:
38:b9:36:14:d2:00:bc:95:d9:a7:02:9a:22:af:c9:93:e2:ed:
ea:bb:5b:64:35:66:ce:34:50:fb:63:7c:cb:42:74:c8:d9:f0:
28:84:75:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz1QgcBcQhOkQ+LeYhreSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGU1MDQ0ZWQ4Mzg3NWM3ZTllZThlY2I4N2RkNmQzMWRk
NWM0YWUwHhcNMjUwODA0MDIwMDQ2WhcNMjUwODA1MDIwMDQ2WjAzMTEwLwYDVQQD
Eyg1ZTNiMjliNWYzZWRlZmEyZDNiYWQ1MGM3ZmVhZmZmNjg4YTI4YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F1Gfg83E6N0U2RpxAeONzCj1EgZ
+5ujclZ1wkTflqLOUdRHU1Im/f31dsUKs3xs/VL8SVniSPYnZFm+5MNtL2cEuSJ/
0fIJ9z4+Yn5mS+r4GTUTBtm9Kkgd1L4YgUE8pzXz2oKhIycCRtYYw+yvT1Z8MWnU
3Jm46tK++94YW/2ErE6VM57/TIxjG7EYzOGzH+DjOMcy+qXfzqPhFalX3tM5MNDX
nNNnOxMiiVGVOzJcti5MV3fwUEwyVx1lH4OnDmYetLghGFHFA7RJ5OobbnMoL6F3
aKXlrrQDHFgJscpnqu1yKyNRWl8X9Vuio3+jgF95m5k3dQWtAjbDbzZxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF47KbXz7e+i07rVDH/q//aIooxBMB8GA1UdIwQY
MBaAFFjeUETtg4dcfp7o7Lh91tMd1cSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQt
YWE5NTg3ODhlZWJmLzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQtYWE5NTg3ODhlZWJm
LzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaiuPhLG
VoDqcnvfJsYLS8rlSP1G4Q4l+QYBb2nd494LKpkGz1/IrmSTzRikorDkgIwcVbAG
v2S7cGLFqLAJcsakUwOwjoucRABl31N1YxacllpBGtXSukwOIpg+HGcnJGnrNI0+
as2pmv+FRK9KmT6nJytcsUuLuV9s/6QFsxoInbQvz3SuTFfMXguvKnF6hbGstIeS
ombe/lHBWR3KVZYCaZWcMaV86cXnIKOvXMZgCIyT7/sCkXlfll3QPwfmuel2B/Ji
G6/P8mQ5ucSu4sZd7Ce9UBogOLk2FNIAvJXZpwKaIq/Jk+Lt6rtbZDVmzjRQ+2N8
y0J0yNnwKIR1zg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:23 2025 by rpki-client